jvn.jpThird-party advisory
https://jvn.jp/en/vu/JVNVU92266386 CVE-2025-34081
MEDIUM
CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
Record summary
CVE-2025-34081 has a selected CVSS score of 6.9 (medium).
Description
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 1, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
CONPROSYS HMI System (CHS)Browse Contec Co.,Ltd. / CONPROSYS HMI System (CHS)Default status: affected | CVE List | Before 3.7.7 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-34081 vulncheck.comThird-party advisory
https://www.vulncheck.com/advisories/conprosys-hmi-system-exposed-php-debug-info